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PRELIMINARY AMENDMENT 

Assistant Commissioner for Patents 
Washington, D.C. 20231 

Dear Sir: 

Prior to an examination on the merits, please enter the amendments below. 


INTHF CLAIMS; 

Please cancel Claims l-29j^ithout disclaimer or prejudice. 

Please add the following new Claims 30-69 as follows: 


j 36. A method of managing a data object so as to comply with control conditions for 
usage of the data object, comprising: 

providing a variable number of control conditions for usage of the data object; 
providing a general set of control data for the data object based on the variable 
number of control conditions for usage, the general set of control data comprising at least 
one or more usage control elements defining usages of the data object which comply with 
the variable number of control conditions; 

combining the general set of control data with the data object; and 
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encrypting the data object and the one or more usage control elements to create a 
secure data package. 

The method of Claim additionally comprising encrypting together the data 
object and the general set of control data. 

I 

3 The method of Claim wherein providing the general set of control data 

includes providing an identifier which uniquely identifies the general set of control data. 

^3^. The method of Claim wherein providing the general set of control data 
includes providing a security control element which identifies a security process to be applied 
before usage of the data object is allowed. 

^ 3^. The method of Claim 30, wherein providing the general set of control data 
includes providing a format control element which identifies the format of the control data. 

The method of Claim additionally comprising: 
receiving a request for authorization for usage by a user; 

comparing the usage for which authorization is requested with the one or more 
usage control elements of the general set of control data; and 

granting the authorization if the usage for which authorization is requested 
complies with the usages defined by the one or more usage control elements, 

3^. The method of Claim 3^ additionally comprising requiring payment for the 
requested authorization for usage before granting the authorization. 


yf. The method of Claim additionally comprising: 

transmitting the secure data package into a data processor; 
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checking, in response to a request by a user for usage of the data object, whether 
the requested usage compHes with the usage defined by the at least one usage control 
element of the general set of control data; and 

decrypting, in response to the requested usage complying with the usage defined 
by the at least one usage control element of the general set of control data, the data object 
so as to enable the requested usage. 

» >8. The method of Claim 37, additionally comprising: 

combining, after the usage of the data object, the data object and the one or more 
usage control elements; and 

reencrypting at least the data object and the one or more usage control elements. 

J/9. A method of controlling the usage by a user of a data object so as to comply with 
control conditions for usage of the data object, comprising: 

providing a variable number of control conditions for usage of the data object; 

providing a data package comprising a data object and control data, which 
comprises at least one usage control element defining a usage of the data object which 
complies with the variable number of control conditions, the data object and the at least 
one usage control element being encrypted; 

receiving a request by the user for usage of the data object; 

decrypting the control data; 

checking, in response to the request by the user for usage of the data object, 
whether the requested usage complies with the usage defined by the at least one usage 
control element of the control data; and 

decrypting, in response to the requested usage complying with the usage defined 
by the at least one usage control element of the control data, the data object and enabling 
the requested usage. 

it 

The method of Claim 3^, wherein the usage control element is updated after the at 
least one usage of the data object. 
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The method of Claim 39, wherein the control data comprises an indication of the 
number of times the user is authorized to use the data object in accordance with the at least one 
usage control element, wherein the requested usage of the data object is only enabled when the 
number of times is one or more, and wherein the number of times is decremented by one when 
the requested usage is enabled. 

The method of Claim wherein the control data comprise a security control 
element, and additionally comprising executing, before each usage of the data object, a security 
procedure defined in the security control element. 

The method of Claim wherein checking whether the requested usage complies 
with the usage defined by the at least one usage control element, comprises checking that a data 
processor is capable of executing a security procedure specified in a security control element of 
the at least one usage control element, and if not, disabling the usage. 

The method of Claim 3^', additionally comprising: 

combining, after the usage of the data object, the data object and the one or more 
usage control elements; and 

reencrypting at least the data object and the one or more usage control elements. 

A system for managing a data object so as to comply with control conditions for 
usage of the data object, comprising: 

a user interface module which receives a variable number of control conditions; 

a packaging module which provides a general set of control data for the data 
object based on the variable number of control conditions for usage, the general set of 
control data comprising at least one or more usage control elements defining usages of 
the data object which comply with the variable number of control conditions and which 
combines the general set of control data with the data object; and 


Appl. No. Unas^Pd 

Filed : Herewith 


an encrypting module which encrypts the data object and at least the one or more 
usage control elements to create a secure data package necessary. 

^. TTie system of Claim ^, wherein the general set of control data comprises a 
control data element which controls fiirther distribution of the data object. 

,^ 

^. The system of Claim ^, wherein one of the usage control elements includes a 
security control element that defines a security procedure. 

^. The system for controlling the usage by a user of a data object so as to comply 
^ with control conditions for usage of the data object, comprising: 

a usage manager module which receives a variable number of control conditions, 
checks whether a usage requested by the user complies with the usage defined by at leasi 
one usage control element that c6mplies with the variable number of control conditions, 
and disables the usage requested by the user when the usage does not comply with the 
usage defined by the at least one usage control element; and 

a decryption module which decrypts the at least one usage control element and the 
data object. 

^ V. n:e system of Claim 4^ wherein one of the usage control elements includes a 
security control element that defines a security procedure. 


^. The system of Claim 49^, wherein the security procedure is an RSA 
algorithm. 


encryption 


7> (Cj 

M. The system of Claim 4S^, wherein the usage manager module repackages the data 
object after usage. 

52. A method of controlling the usage by a user of data objects so as to comply with a 
variable number of conditions for usage of the data objects, comprising: 
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providing at least two data packages, each data package comprising a data object 
and a user set of control data, which comprises at least one usage control element 
defimng a usage of the data object which complies w,th the variable number of 
conditions, the data object and the at least one usage control elements being encrypted; 

deciypting the usage control elements of the user sets of control data; 

examining the usage control elements of the at least two data packages to find a 

match; and 

performing an action being specified in the user sets of control data of the at least 
two data packages. 


I ^. The method of Claim ^ wherein one of the at least two data packages is a sell 

order, and wherein one of the at least two data packages is a buy order. 

^V. The method of Claim ^ additionally comprising checking whether a data 
processor is capable of executing a security procedure specified in a security control element of 
the at least one usage control element, and disabling the usage when the data processor is not 
capable of executing the security procedure. 

The method of Claim ,52, additionally comprising: 

updating the at least one usage control element of each data package; 

combining after the usage of the data objects, each of the data objects and its at 

least one usage control element; 

reencrypting each of the combined data objects and its at least one usage control 
element; and 

transferring the repackaged data objects to their providers. 


A method of managing a data object so as to comply with a variable number of 
control conditions for usage of the data object, comprising: 

providing variable control conditions for usage of the data object; 
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providing a general set of control data for the data object based on the variable 
control conditions for usage, the general set of control data comprising at least one or 
more usage control elements defining usages of the data object vv^hich comply with the 
variable control conditions; 

providing, in response to a request for authorization for usage of the data object 
by a user, a user set of control data, which comprises at least a subset of the general set of 
control data, including at least one of the usage control elements; 
combining the user set of control data with the data object; 
encrypting at least the data object and the at least one of the usage control 
elements of the user set of control data to create a secure data package; and 

checking, before allowing transfer of the data package to the user, that the request 
for authorization for usage of the data object has been granted. 

yi. The method of Claim % additionally comprising checking whether a data 
processor is capable of executing a security procedure specified in a security control element of 
the at least one usage control element, and disabling the usage when the data processor is not 
capable of executing the security procedure. 

^. The method of Claim wherein the data object is composed of at least two 
constituent data objects and wherein the user set of control data, in response to a request for 
authorization for usage of one of the constituent data objects by a user, is created only for that 
constituent data object and combined only with a copy of that constituent data object. 

S9. The method of Claim 5^, wherein the request for authorization is received fi-om a 
user via a data network. 

^ ^. The method of Claim 5^, wherein the data object is a composite data object 
including at least two constituent data objects, and wherein providing a general set of control 
data comprises providing a respective general set of control data for each of the constituent data 
objects and the composite data object, and wherein providing a user set of control data comprises 
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pn,vidi„g a raspecive user of comro. da.a for each of .he co„s„-,„en. da,a objects and U,e 

composite data object. 

TTe ^eftod as defined in CIa™*5<add,.ionaily comprising storing the nser set of 
control data in a processor of a data object provider. 

5^>2: The method as defined in Claim t, additionally comprising: 
transmitting the data package; 

dect^ting the at least one usage control element of the use, set of control data- 
checking, ,n response to a request by the user for usage of the data object, whether 
the requested usage complies with the usage defined by the at least one usage control 
element of the user set of control data; and 

deco-pting, in response to the requested usage complying with the usage defined 
by the at leas, one usage control element of the user se, of conuol data, the data object 
and enabhng the requested usage. 

.63. The method of Claim 56, additionally comprising: 
transmitting the data package; 

dec,yp.i„g fte a. leas, one usage comrol elemem of the user se. of conuo. data- 
checfng. m response to a request by the user for usage of *e da.a object, whedier 
the requested usage complies wiU, .he usage defined by the at least one usage contn,l 
element of the user set of control data; 

decrypting, in response to .he reques.ed usage complying wi.h the usage defmed 
by the a, leas, one usage control elemen. of the user set of control data, the data object 
and enabling the requested usage; and 

combining, after the usage of the data objec. the data object and the one or more 
usage control elemen,s of the user se. of con.rol da.a. and combining a. lea« the dau 
objec. and the one or more usage of the user set of control data. 

-^V. A system for managing a da.a objec. so as .o comply with control conditions for 
usage of the data object, comprising: 
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a packaging module which provides a general set of control data for the data 
object based on variable conditions for usage, the general set of control data comprising 
at least one or more usage control elements defining usages of the data object which 
comply with the variable conditions and which combines the user set of control data with 
the data object, and wherein the packaging module provides in response to a request for 
authorization for usage of the data object by a user, a user set of control data, which 
comprises at least a subset of the general set of control data, which subset comprises at 
least one of the usage control elements; 

an encrypting module which encrypts the data object and at least the one or more 
usage control elements of the user set of control data to create a secure data package, 
( which is ready for transfer to a user; and 

^ a control module which checks that the request for authorization for usage of the 

data object has been granted before allowing transfer of the data package to the user. 

^ A method of managing a data object so as to comply with control conditions for 
usage of the data object, comprising: 

providing a general set of control data for the data object based on a variable 
number of control conditions for usage, the general set of control data comprising at least 
one or more usage control elements defining usages of the data object which comply with 
the variable number of control conditions; and 

encrypting the data object and the one or more usage control elements to create at 
least one secure data package. 


^. The method of Claim 0, wherein the data object and the usage control elements 
are each encrypted into separate secure packages. 

' 0. The method of Claim ^, wherein providing the general set of control data 
includes providing a security control element which identifies a security process to be applied 

before usage of the data object is allowed. 
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^ The method of Claim ^, wherein providing the general set of control data 

includes providing a format control element which identifies the format of the control data. 


V> >9. The method of Claim f>5, additionally comprising: 

receiving a request for authorization for usage by a user; 

comparing the usage for which authorization is requested with the one or more 
usage control elements of the general set of control data; and 

granting the authorization if the usage for which authorization is requested 
complies with the usages defined by the one or more usage control element. 


Respectfiilj>^^§Bbmttted^ 

KNOB^E, MARTENS, OLSON & BEAR, LLP 


Dated: \ O f[ / 



By: 

John M.ICarson 
Registration No. 34,303 
Attorney of Record 
620 Newport Center Drive 
Sixteenth Floor 
Newport Beach, CA 92660 
(619)235-8550 
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